Running out of file descriptors when accepting new connections is perfectly fine and acts as circuit breaker, so Envoy shouldn't be crashing when it cannot accept new connections.